CLAIMS 



WHAT IS CLAIMED IS : 

1 . A method for generating a report on an unsolicited electronic message, 
comprising: 

receiving an electronic mail message; 

determining whether the electronic message is an unsolicited message; 
if the message is an unsolicited message, 

examining the message to identify a network address relating to the 
message, 

identifying an authority hosting the network address, and 

generating a report containing the identified network address and 
hosting authority. 



2. The method of claim 1 further comprising transmitting the generated 
report to the identified hosting authority. 
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3. The method of claim 1 wherein examining the message to identify a 
network address comprises identifying a URL. 

4. The method of claim 3 wherein identifying a URL comprises 
comparing text within the electronic message to a database of words to identify 
the URL. 

5. The method of claim 3 further comprising comparing the identified 
URL to a database of legitimate URLs. 

6. The method of claim 5 further comprising updating the database based 
on electronic messages received. 

7. The method of claim 3 wherein identifying the hosting authority 
comprises utilizing an Internet tool to locate a web server hosting the URL. 

8. The method of claim 7 wherein utilizing an Internet tool comprises 
utilizing WHOIS. 
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9. The method of claim 1 wherein identifying the hosting authority 
comprises identifying an owner of a network domain. 

10. The method of claim 1 wherein identifying the hosting authority 
comprises identifying an Internet service provider. 

1 1 . The method of claim 1 further comprising transmitting the report to a 
central managed service provider configured to forward the report to the 
identified hosting authority. 

12. The method of claim 1 further comprising at least temporarily saving 
the report and transmitting the report to the identified hosting authority at the end 
of a specified period. 
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13. A system for generating a report on an unsolicited electronic message, 
the system comprising: 

a detector operable to detect a network address within an electronic 
message identified as an unsolicited message; 

a host identifier operable to identify an authority hosting the network 
address; 

a report generator operable to generate a report containing the identified 
network address and hosting authority; and 

a storage medium configured to at least temporarily store the identified 
network address and hosting authority. 

14. The system of claim 13 further comprising a detector operable to 
detect unsolicited messages. 

15. The system of claim 1 3 wherein the network address is a URL. 

16. The system of claim 13 wherein the hosting authority is an Internet 
service provider. 
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17. The system of claim 13 further comprising a processor operable to 
transmit the generated report. 

18. The system of claim 17 wherein the processor is configured to 
transmit the report to the identified hosting authority. 

19. The system of claim 17 wherein the processor is configured to 
transmit the report to a central managed service provider. 

20. The system of claim 13 further comprising a database containing 
search terms used to identify the network address within text of the electronic 
message. 

21. The system of claim 13 further comprising a database containing a list 
of trusted network addresses. 
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22. A computer product for generating a report on an unsolicited 
electronic message, comprising: 

code that receives an electronic mail message; 

code that determines whether the electronic message is an unsolicited 
message; 

code that examines the message to identify a network address relating to 
the message if the message is an unsolicited message, 

code that identifies an authority hosting the network address; 

code that generates a report containing the identified network address; and 

a computer readable medium that stores said computer codes. 

23. The computer product of claim 22 wherein the computer readable 
medium is selected from the group consisting of CD-ROM, floppy disk, tape, 
flash memory, system memory, hard drive, and a data signal embodied in a carrier 
wave. 

24. The computer product of claim 22 further comprising code that 
transmits the generated report to the identified hosting authority. 
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25. The computer product of claim 22 further comprising code that 
compares text within the electronic message to a database of words to locate the 
network address within the text. 

26. The computer product of claim 22 further comprising code that 
compares the identified network address with trusted network addresses. 
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